Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC
SINUMERIK ONE and SINUMERIK MC products are affected by a denial of service vulnerability in the OPC UA implementation of the integrated S7-1500 CPU. The vulnerability in the integrated S7-1500 CPU is documented in more detail in SSA-711309 [1]. Siemens has released updates for the affected products and recommends to update to the latest versions. [1] https://cert-portal.siemens.com/productcert/html/ssa-711309.html
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-28831US | high7.5 | — | ||
The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could cause the application to run into an infinite loop during cert… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC - CSAF Versionself
- SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC - HTML Versionself
- SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC - PDF Versionself
- SSA-118850: Denial of Service Vulnerability in the OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC - TXT Versionself
- ICS Advisory ICSA-23-348-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-348-06 - Web Versionself
- Recommended Practicesexternal
Behebungen (4)
- MitigationSINUMERIK MC
Expose the OPC UA interface of the integrated S7-1500 CPU only to trusted network environments
- MitigationSINUMERIK ONE
Expose the OPC UA interface of the integrated S7-1500 CPU only to trusted network environments
- BehobenSINUMERIK MC
Update to V1.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109824227/ - BehobenSINUMERIK ONE
Update to V6.22 or later version
https://support.industry.siemens.com/cs/ww/en/view/109824227/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan